System and Method For Providing Load Balanced Secure Media Content And Data Delivery in a Distributed Computing Environment

ABSTRACT

A system and method for providing load balanced secure media content and data delivery ( 10 ) in a distributed computing environment is disclosed. Media content is segmented and encrypted into a set of individual encrypted segments on a centralized control center ( 15 ). Each individual encrypted segment has the same fixed size. The complete set of individual encrypted segments is staged to a plurality of intermediate control nodes ( 17, 19 ). Individual encrypted segments are mirrored from the staged complete set to a plurality of intermediate servers ( 21   a - b,    23   a - b ). Requests are received from clients ( 11 ) for the media content at the centralized control center. Each individual encrypted segment in the set is received from one of an intermediate control node and an intermediate server optimally sited from the requesting client. The individual encrypted segments are reassembled into the media content for media playback.

CROSS-REFERENCE TO RELATED APPLICATIONS

This patent application is a continuation of U.S. patent applicationSer. No. 11/663,397, filed Jun. 5, 2008, which is the National Stage ofInternational Application No. PCT/US02/00332, filed on Jan. 2, 2002which claims the benefit of U.S. provisional patent applications, Ser.No. 60/259,503, filed Jan. 2, 2001; and Ser. No. 60/262,529, filed Jan.17, 2001; the priority dates of which are claimed pursuant to 35 U.S.C.§119(e) and the disclosures of which are incorporated by reference.

TECHNICAL FIELD

The present invention relates in general to media content delivery and,in particular, to a system and method for providing load balanced securemedia content delivery in a distributed computing environment.

BACKGROUND OF THE INVENTION

Television is the most widely available form of mass audiovisualcommunications in use today. The basic format of television isrelatively mature, consisting primarily of television network-operatedtransmission stations sending programming signals to passive receiversor “sets.” Media content, in the form of television shows andadvertising, are transmitted over specific radio frequencies and programselection is limited to the programming broadcast at any given time.

Cable- and satellite-based television network services offer analternative to conventional radio frequency-based televisionprogramming. Both formats offer superior reception quality and providean extensive selection of media content by airing a wider range oftelevision channels. Of late, these network services have begun to offer“pay-per-view” programming services. Using set-top boxes, subscriberscan purchase time-restricted access to view content made available oncontrolled television channels. Popular content includes first runmovies and sporting events. Although more flexible than conventionaltelevision, “pay-per-view” formats only provide access to the additionalcontent aired by the cable or satellite networks at specific show timeson standard television sets and are not broadcast via other means.

Recognizing this shortfall, media content providers operating overinternetworks, and specifically, the Internet, have begun to offerdownloadable media content as an alternative to television broadcastprogramming. Live media content is aired as streaming media and static,pre-recorded media content is staged on content servers for retrievaland playback by clients on demand. Television, as well as radio,programming is also available. To view media content over aninternetwork, users use a Web browser to navigate to the desired mediacontent and then execute a media playback application within the Webbrowser to download and view the selected shows and other content.

Although more customizable than standard television programming,Internet-based “media-on-demand” (henceforth, simply “media-on-demand”)services suffer from numerous shortcomings. The most apparentshortcoming is a drastic difference in viewing experience. Personalcomputer displays offer a higher resolution than standard NTSCtelevision sets. This difference negatively affects the appearance ofmedia content. Moreover, Web browser-based media playback applicationsdisplay media at low resolutions in small viewing windows with lowfidelity sound, thereby further degrading the viewing experience.

As well, media-on-demand is network infrastructure-sensitive. Mediacontent is generally downloaded as a series of streamed serializedpackets. To improve throughput, the loss of individual packets can betolerated to a certain degree at the expense of distortion duringplayback. However, media content delivery is contingent on the continuedavailability of the content server and is subject to bandwidth andnetwork load constraints. As well, delivery is further limited by theprocessing capability of each client.

In addition, most media content is subject to copyright and other formsof digital rights protections. However, media content is often stagedwith little or no privilege or access safeguards. Content is freelyavailable for downloading and viewing without significant copying ordistribution protections. Once downloaded, redistribution consequentlybecomes uncontrollable and infringements virtually impossible to police.

Similarly, media-on-demand further lacks electronic commerce(e-commerce) and electronic business (e-business) support. For example,e-commerce concerns conducting on-line transactions over an internetworkand e-business concerns running a business based on an network-centricbusiness model. However, users generally request media from a contentserver with minimal interaction. With few exceptions, no transactionprocessing, order management, or advertising and product targeting takeplace. Media content is simply downloaded and viewed with potentialbusiness opportunities lost.

In the prior art, direct download and media content streaming are thetwo predominant forms of media content retrieval. Direct downloadinvolves the retrieval of media content from a content server en masse.The user browses available data files containing media content anddownloads a media content selection in the same way as any other file.This approach is slow and inefficient, as content is unicast from thecontent server to the requesting client in a one-to-one connection.Furthermore, less bandwidth-capable clients suffer further, as mostcontent servers are architected to service the fastest connectionsfirst.

Media content streaming involves the delivery of media content in aseries of individual packets at a data rate preferably exceeding therate of consumption. Individual packets are received in serial order andstored in a temporary buffer until the requesting client has receivedpackets sufficient to enable playback. However, streaming isbandwidth-dependent and also unicast.

Therefore, there is a need for an approach to delivering full-function,full-motion media-on-demand in a distributed computing environment.Preferably, such an approach would provide secure reliable contentdelivery through a hierarchical media service infrastructure.

There is a further need for an approach to serving media content via adistributed network framework incorporating fault tolerance and dynamicload balancing. Preferably, such an approach would offer contentprovider support functions including user profiling and e-commerce ande-business management.

DISCLOSURE OF INVENTION

The present invention provides a system and method for deliveringencrypted segmented media content to individual clients through adynamically load balanced network framework. Media content is encoded toa uniform format and is segmented and encrypted, preferably using oneunique key per segment. A centralized control center, known as a NeuroCenter, stages complete sets of the segmented encrypted media content tointermediate control nodes, known as Neuro Nodes, dispersed throughoutthe network. The Neuro Nodes then mirror select individual encryptedsegments to intermediate servers, known as Edge Servers, and, in afurther embodiment, to individual clients, known as Smart Clients. TheEdge Servers and Smart Clients maintain the mirrored individualencrypted segments for eventual delivery to requesting Smart Clients.Via a client, a user requests delivery of media content from thecentralized control center, which validates the request and furnishes avalidation certificate enabling delivery of the requested content. Theclient then requests each individual encrypted segment from either anintermediate control node, intermediate server, or, in a furtherembodiment, a peer client, on a segment-by-segment basis, based onnetwork load and component availability. Playback of the delivered mediacontent begins upon the receipt of sufficient individual encryptedsegments.

An embodiment of the invention provides a system and method forproviding load balanced secure media content delivery in a distributedcomputing environment. Media content is segmented and encrypted into aset of individual encrypted segments on a centralized control center.Each individual encrypted segment has a same fixed size. The completeset of individual encrypted segments is staged to a plurality ofintermediate control nodes. Individual encrypted segments are mirroredfrom the staged complete set to a plurality of intermediate servers.Requests are received from clients for the media content at thecentralized control center. Each individual encrypted segment in the setis received from one of an intermediate control node and an intermediateserver optimally sited from the requesting client. The individualencrypted segments are reassembled into the media content for mediaplayback. The segments may be received from different servers innon-sequential order. The requesting client should acquire the firstsegment from whichever of the intermediate control node or intermediateserver that can deliver the first segment fastest, thus providing animmediate-playback start capability.

Still other embodiments of the present invention will become readilyapparent to those skilled in the art from the following detaileddescription, wherein is described embodiments of the invention by way ofillustrating the best mode contemplated for carrying out the invention.As will be realized, the invention is capable of other and differentembodiments and its several details are capable of modifications invarious obvious respects, all without departing from the spirit and thescope of the present invention. Accordingly, the drawings and detaileddescription are to be regarded as illustrative in nature and not asrestrictive.

DESCRIPTION OF THE DRAWINGS

FIG. 1 is a block diagram showing a system for providing load balancedsecure media content delivery in a distributed computing environment.

FIG. 2 is a process flow diagram showing load balanced secure mediacontent delivery via the system of FIG. 1.

FIG. 3 is a process flow diagram showing load balanced secure mediacontent delivery with peer-to-peer intercommunication in accordance witha further embodiment.

FIG. 4 is a process flow diagram showing load balanced secure mediacontent delivery with pre-casted media content staging in accordancewith a further embodiment.

FIG. 5 is a block diagram showing the software modules of the NeuroCenter of FIG. 1.

FIG. 6 is a block diagram showing the software modules of a Neuro Nodeof FIG. 1.

FIG. 7 is a block diagram showing the software modules of an Edge Serverof FIG. 1.

FIG. 8 is a block diagram showing the software modules of a Smart Clientof FIG. 1.

FIG. 9 is a data structure diagram showing a play ticket used by thesystem of FIG. 1.

FIG. 10 is a data structure diagram showing a validation certificateused by the system of FIG. 1.

FIG. 11 is a data structure diagram showing a packet header used by thesystem of FIG. 1.

FIG. 12 is a flow diagram showing a method for providing load balancedsecure media content delivery in a distributed computing environment.

FIG. 13 is a flow diagram showing a routine for performing theoperations of the Neuro Center for use in the method of FIG. 12.

FIG. 14 is a flow diagram showing a routine for performing theoperations of a Neuro Node for use in the method of FIG. 12.

FIG. 15 is a flow diagram showing a routine for performing theoperations of an Edge Server for use in the method of FIG. 12.

FIG. 16 is a flow diagram showing a routine for performing theoperations of a Smart Client for use in the method of FIG. 12.

DETAILED DESCRIPTION

FIG. 1 is a block diagram showing a system 10 for providing loadbalanced secure media content delivery in a distributed computingenvironment. Media content is delivered as individual encrypted segmentsto a Smart Client 11 or, alternatively, to a set-top box (STV) 13 forairing on a television set (TV) 14. The Smart Client 11 provides mediaviewing playback capabilities to personal computers, wireless devices,public display kiosks, and the like. The Smart Client 11 includes alocal storage 12 in which the segments are transitorily stored.Henceforth, for clarity of discussion, media content delivery will bedescribed with reference to the Smart Client 11 only, although oneskilled in the art would recognize that a similar form of delivery wouldapply to a set-top box 13 or similar media access device. The SmartClient 11 is further described below with reference to FIG. 8.

The Smart Client 11 initiates the media content delivery process bysending a request to a Neuro Center 15. The Neuro Center 15 centrallymanages all requests for media content and is accessible via aninternetwork 26, including the Internet, or similar broadband wide areanetwork. The Smart Client 11 interfaces to the internetwork 26 throughan Internet Service Provider 25 (ISP) or via direct connection (notshown). The Neuro Center 15 maintains a master database 16 in whichindividual users are profiled and e-commerce and e-business managementdata are maintained. Upon validating each client request, the NeuroCenter 15 requests the Smart Client 11 to check the network and commencemedia content delivery. The Neuro Center 15 is further described belowwith reference to FIG. 5.

The actual media content is stored as individual encrypted segments onNeuro Nodes 17 and 19 and Edge Servers 21 a-b and 23 a-b. Neuro Node 17and Edge Servers 21 a-b are locally interfaced via an intranetwork 27and are interfaced to the Neuro Center 15 via a gateway (GW) 28interfacing to the internetwork 26. Neuro Node 19 and Edge Server 23 a-bdirectly interface to the Neuro Center 15 via the internetwork 26. Otherconfigurations and network topologies are feasible, as would berecognized by one skilled in the art.

The Neuro Nodes 17 and 19 maintain segment storages 18 and 20,respectively, in which complete sets of individual encrypted segmentscomprising a complete (or portion of a) media selection are stored. TheEdge Servers 21 a-b and 23 a-b also maintain segment storages 22 a-b and24 a-b, respectively, in which mirrored segments are maintained. TheNeuro Nodes 17 and 19 selectively copy or “mirror” segments to the EdgeServers 21 a-b and 23 a-b to optimally balance the distribution ofindividual encrypted segments throughout the network. Neuro Nodes 17 and19 are further described below with reference to FIG. 6 and Edge Servers21 a-b and 23 a-b are further described below with reference to FIG. 7.

The individual computer systems, including Neuro Center 15, Neuro Nodes17 and 19, Edge Servers 21 a-b, and 23 a-b, and Smart Client 11, aregeneral purpose, programmed digital computing devices consisting of acentral processing unit (CPU), random access memory (RAM), non-volatilesecondary storage, such as a hard drive or CD ROM drive, networkinterfaces, and peripheral devices, including user interfacing means,such as a keyboard and display. Program code, including softwareprograms and data, are loaded into the RAM for execution and processingby the CPU and results are generated for display, output, transmittal,or storage.

FIG. 2 is a process flow diagram showing load balanced secure mediacontent delivery 40 via the system of FIG. 1. The key to achievingdynamic load balancing is through the continuous determination ofnetwork throughput and load characteristics using client-generated“pulses” A pulse is generated prior to requesting each individualencrypted segment to identify an optimally sited Neuro Node or EdgeServer from which to request the segment. Media content delivery beginswith a Smart Client 41 sending a request 45 to a Neuro Center 42 (step{circle around (1)}). In response, the Neuro Center 42 validates theclient request 45 and sends a response 46 requesting the Smart Client to“pulse” the network status prior to commencing delivery (step {circlearound (2)}).

The requested media content is delivered in individual encryptedsegments received from Neuro Nodes 43 and Edge Servers 44. Prior toreceiving each segment, Smart Client 41 broadcasts a “pulse” 47 over thenetwork to determine the load and operational status of the variousNeuro Nodes 43 and Edge Servers 44 (step {circle around (3)}). The SmartClient 41 receives “pulse” responses and segments 48 back from the NeuroNodes 43 and Edge Servers 44 (step {circle around (4)}). The NeuroCenter 42 manages encryption and security in the background to mediacontent delivery.

The “pulse” responses indicate the network load and relative status ofeach network component while each segment contains a portion of theactual requested media content. The Smart Client 41 reassembles theindividual encrypted segments and begins media playback upon receiving asufficient number of segments. The Smart Client 41 decrypts anddecompresses each segment and provides a full-featured, full-motionplayback. Note the segments need not be received in serial order and canbe (and in practice, often are) requested from different Neuro Nodes 43and Edge Servers 44, depending on network load and component status.

FIG. 3 is a process flow diagram showing load balanced secure mediacontent delivery with peer-to-peer intercommunication 60 in accordancewith a further embodiment. The Smart Client 61 takes advantage of mediacontent already made available on peer Smart Client 65 throughpeer-to-peer segment sharing. This approach improves file deliverycapabilities and provides a highly scalable network with a richintermediate content server population.

As before, a Smart Client 61 sends a request 66 to a Neuro Center 62 toinitiate media content delivery (step {circle around (1)}). The NeuroCenter 62 validates the request and sends a response 67 requesting theSmart Client 61 to “pulse” the network (step {circle around (2)}). TheSmart Client 61 broadcasts a “pulse” 68 over the network to the NeuroNodes 63, Edge Server 64 and other Smart Clients 65 (step {circle around(3)}). These components send back responses and segments 69 (step{circle around (4)}) as above.

FIG. 4 is a process flow diagram showing load balanced secure mediacontent delivery with pre-casted media content staging 80 in accordancewith a further embodiment. Ordinarily, a Neuro Center 81 is onlyinitially involved in media content delivery during the validation ofindividual user requests. However, to substantially minimize the delayattendant to media content delivery during peak demand times, the NeuroCenter 81 can pre-cast 84 (step {circle around (1)}) media content toeach Smart Client 82 during off-peak times. The initial segments ofpopular media content are thereby staged at individual Smart Clients 82for immediate playback by a user without incurring a delay due tonetwork load and demand. Once playback begins, the remaining segmentsare sent to each Smart Client 82 in a continuous multicast 85 from theNeuro Center 81 (step {circle around (2)}).

FIG. 5 is a block diagram showing the software modules 100 of the NeuroCenter 101 of FIG. 1. The Neuro Center 101 functions as a centralizedcontrol center and is primarily responsible for preparing raw mediacontent 112 for distribution as individual encrypted segments 115 andfor validating individual user requests. The Neuro Center 101 includes:encoding module 102, segmentation module 103, encryption module 104,profiling and e-commerce module 105, request processing module 106,ticket validation module 107, pre-casting module 108, and multicastingand broadcasting module 109.

The encoding module 102 receives raw media content 112 from a variety ofdiverse sources, including the Internet, satellite and cable feeds,wireless devices, and next-generation media sources. The raw mediacontent 112 is converted into a standardized form of encoded content114. In turn, the segmentation module 103 segments the encoded content114 into sets of individual segments 115 which are then encrypted by theencryption module 104, preferably using a different unique key for eachindividual segment. The complete sets of individual encrypted segments115 are then broadcast by the multicasting and broadcasting module 109to the Neuro Nodes (shown in FIG. 1) for mirroring to Edge Servers and,in a further embodiment, Smart Clients.

Individual users request media content delivery by sending a play ticket110, as further described below with reference to FIG. 9. The playticket 110 identifies the user and requested media content. The requestprocessing module 106 processes each request and the ticket validationmodule 107 validates the play ticket 110. The ticket validation module107 accesses a ticket database 118 to validate the play ticket 110 andgenerate a validation certificate 111 which is sent back to therequesting client. The profiling and e-commerce module 105 accesses userprofiles 116 and e-commerce data 117 to provide demographics trackingand order management. As well, advertising and product targeting can bedelivered via the profiling and e-commerce module 105.

The pre-casting module 108 is used in a further embedment to stage theinitial segments of popular media content to the individual SmartClients during off-peak times. Finally, the multicasting andbroadcasting module 109 sends sets of segments 115, as well asindividual encrypted segments 115, to a select subset of networkcomponents (multicasting) or to all network components (broadcasting).The Neuro Center 101 monitors network status 113 in the background.

FIG. 6 is a block diagram showing the software modules 120 of a NeuroNode 121 of FIG. 1. Each Neuro Node 121 functions as an intermediatecontrol node within the network. The Neuro Center (shown in FIG. 1)sends complete sets of individual encrypted segments, collectivelyconstituting a complete work, to each Neuro Node 121 for staging andmirroring. Each Neuro Node 121 includes: mirroring module 122, requestprocessing module 123, multicasting and broadcasting module 124, andcodec module 125.

The mirroring module 122 selectively stages individual encryptedsegments 128 to Edge Servers and, in a further embodiment, SmartClients. The segments are distributed throughout the network to maximizeload balancing and fault tolerance. The request processing module 123receives incoming requests from individual Smart Client. The requestsare staged in a request queue 126. The multicasting and broadcastingmodule 124 sends a requested segment 128 if the Neuro Node 121 isoptimally sited relative to the requesting Smart Client. Alternatively,a plurality of individual client requests for the same segment 128 canbe stored in the request queue 126 and fulfilled en masse by themulticasting and broadcasting module 124. The advantage of stagingmultiple client requests is network throughput efficiency. The requestprocessing module 123 authenticates each user through a userauthentication table 129. The Neuro Node 121 monitors the network status127 in the background. The codec 125 compresses individual encryptedsegments 128 prior to delivery to a Smart Client.

FIG. 7 is a block diagram showing the software modules 140 of an EdgeServer 141 of FIG. 1. Each Edge Server 141 functions as an intermediateserver within the network. The Neuro Nodes (shown in FIG. 1) mirrorselect individual encrypted segments to each Edge Server 141 forstaging. Each Edge Server 141 includes: request processing module 143,segment receipt module 142, multicasting and broadcasting module 144,and codec module 145. The segment receipt module 142 receives individualencrypted mirrored segments 148 selectively staged by the Neuro Nodes.

The request processing module 143 receives incoming requests fromindividual Smart Clients. The requests are staged in a request queue146. The Edge Server 141 sends a mirrored requested segment 148 if theEdge Server 141 is optimally sited relative to the requesting SmartClient. Alternatively, a plurality of individual client requests for thesame mirrored segment 148 can be stored in the request queue 146 andfulfilled en masse by the multicasting and broadcasting module 144. Theadvantage of staging multiple client requests is network throughputefficiency. The request processing module 143 authenticates each userthrough a user authentication table 149. The Edge Server 141 monitorsthe network status 147 in the background.

FIG. 8 is a block diagram showing the software modules 160 of a SmartClient 161 of FIG. 1. Each Smart Client 161 initiates, facilitates anddelivers media content to a requesting user. The Smart Client 161includes: user interface module 162, request processing module 163,segment receipt module 164, multicasting and broadcasting module 165,codec module 166, and playback module 167.

The user interface module 162 provides controls to select media contentfor delivery. The request processing module 163 forms a request formedia content that is sent to the Neuro Center (shown in FIG. 1) toinitiate content delivery. The segment receipt module 164 receivesindividual downloaded segments 168 from the Neuro Nodes, Edge Servers,and, in a further embodiment, Smart Clients. A “pulse” is sent over thenetwork via the multicasting and broadcasting module 165 to determinethe current status of the network. The segment receipt module 164 alsoreceives pre-cast segments 169 sent by the Neuro Center during off-peaktimes. Similarly, the segment receipt module 164 stages mirroredsegments 170 received from Neuro Nodes when providing peer-to-peerintercommunications, in accordance with a further embodiment. The codecmodule 166 decompresses the individual downloaded segments 168 andpre-cast segments 169. The codec module 166 performs decryption of eachindividual segment including the decryption by a unique key through useof the play ticket 110 and validation certificate 111 (both shown inFIG. 5). Finally, the playback module 167 provides full-feature playbackfunctionality, including play, pause, stop, rewind, fast forward, fullscreen, chapter stops, shuttle bar, and similar features.

Each module in the Neuro Center 101, Neuro Node 121, Edge Server 141,and Smart Client 161 is a computer program, procedure or module writtenas source code in a conventional programming language, such as the C++programming language, and is presented for execution by the CPU asobject or byte code, as is known in the art. The various implementationsof the source code and object and byte codes can be held on acomputer-readable storage medium or embodied on a transmission medium ina carrier wave. The system operates in accordance with a sequence ofprocess steps, as further described below with reference to FIG. 12.

FIG. 9 is a data structure diagram showing a play ticket 180 used by thesystem 10 of FIG. 1. Each play ticket 180 is used to transact thepurchase or rental of delivered media content. Briefly, a play ticket180 is issued on an individual customer basis and contains informationabout the movie ordered. Only a portion of the movie key for each movieis stored on a play ticket 180 to disable decryption and safeguardagainst theft and unauthorized access. The movie key also prevents reuseof the play ticket 180.

When a customer orders media content from a Neuro Center (shown in FIG.1), a play ticket 180 is generated and includes the following:

(1) Certificate serial number (181) for the ticket;

(2) Customer number (182);

(3) Creation date and time (183);

(4) Expiration date and time (184);

(5) Movie title number (185);

(6) Number of plays (186)

(7) Reserved (187)

(8) Movie key (Part 1) (188); and

(9) Certificate signature (189).

The Certificate signature 189 is a digital signature prepared usingsymmetric public key encryption. The certificate signature 189 ensuresthe ticket cannot be altered without validation. As well, the movie keypart 1188 includes only a portion of the entire movie key, which issplit into two pieces between the play ticket 180 and a validationcertificate 200 (shown below in FIG. 10).

In the described embodiment, each play ticket 180 has a 96-bytestructure containing all information necessary to validate the playticket. The certificate serial number 181 is used as a record lookup keyinto the ticket database 118 (shown in FIG. 5). The customer number 182and movie title number 185 are also stored in the ticket database 118and validated when the play ticket is used.

Before the play ticket 180 is presented for validation by the NeuroCenter, the Smart Client checks the certificate signature 189 forvalidity. The certificate signature 189 includes a checksum of thecertificate consisting of the first 64 bytes which are cryptographicallysigned using the Digital Signature Standard (DSS). If the play ticket180 has been altered, the certificate signature 189 will not match andthe signature validation will fail.

The number of plays field 186 can contain either a special numeric valueindicating the ticket is good for unlimited plays, that is, the user haspurchased the media content, or a numeric value indicating the number ofplays remaining in a rental of the media content. Unlimited play tickets180 do not have an expiration date and time 184.

Generally, all other play tickets 180 are good for only one play. If thenumber of plays in the play ticket 180 is greater than one, the playticket 180 must be replaced. When validated, a replacement play ticket180 is also returned with the number of plays field 186 reduced and anew certificate serial number 181 issued.

FIG. 10 is a data structure diagram showing a validation certificate 200used by the system 10 of FIG. 1. Each validation certificate 200includes essentially the same information as a play ticket 180 asfollows:

(1) Certificate serial number (201) for the validation certificate;

(2) Customer number (202);

(3) Creation date and time (203);

(4) Expiration date and time (204);

(5) Movie title number (205);

(6) Reserved (206);

(7) Movie key (Part 2) (207); and

(8) Certificate signature (208).

Like the play ticket 180, the Neuro Node validates each validationcertificate 200 using the certificate signature 208. If the certificatesignature 208 does not match, the validation certificate 200 is invalid.The validation certificate 200 includes the other remaining portion ofthe movie key Part 2 207.

In the described embodiment, each movie key is split into two parts byusing a second 128-bit random number generated using the same operationsas used to generated the movie key Part 1. The second 128-bit randomnumber is used as a split filter using an exclusive OR operation againstthe full movie key. The value used to split the key becomes thevalidation key.

Play tickets are computed according to the following operation:

K₂=K_(M) ⊕ K₁

where:

-   -   K_(M) is the Movie Key    -   K₁ is the Validation Key (Split Value)    -   K₂ is the Play Ticket Key

The validation key is stored in the ticket database 118, along with theother information necessary to validate the play ticket 180. The playticket key becomes part of the play ticket 180.

During the later validation phase, after the play ticket information hasbeen validated against the ticket database 118, a validation certificate200 is generated and sent to the user. This certificate includes thevalidation key. The full movie key is recovered by using an exclusive ORof the two values to reverse the split process and recover the originalkey.

FIG. 11 is a data structure diagram showing a packet header 220 used bythe system 10 of FIG. 1. A packet header 220 is prepended to eachsegment to enable a Smart Client (shown in FIG. 1) to reassemble themedia content and enable playback. In the described embodiment, theindividual data packets are sent in accordance with the Tranz-CastDelivery Protocol (TCDP), a data exchange network based on the ReliableMulticast Framework (RMF).

The fixed header of each TCDP data packet contains the following fields:

(1) Sources (221): port number from which the packet was sent;

(2) Destination (222): port number to which the packet was directed;

(3) Packet Length (223): contains a count of octets in the packet,including the header and data;

(4) Checksum (224): corresponds to the Internet protocol checksum;

(5) Type (225): identifies the type of packet;

(6) Data Owner (226): contains a unique identifier for the originator ofthe data. Together with the sequence number, the contents of this fielduniquely define a packet when multiple senders share a common multicastaddress;

(7) Sequence Number (227): increments by one for each new packet sentand may be used by the receiver to detect packet loss and to restorepacket sequence;

(8) Header Extensions (228): indicates the presence of a headerextension field; and

(9) Data (229): Variable payload data is appended to the end of theheader 220 and may be of any length, including zero, as specified by thetype field. Other types and combinations of fields are possible, aswould be recognized by one skilled in the art.

FIG. 12 is a flow diagram showing a method for providing load balancedsecure media content delivery 240 in a distributed computingenvironment. Each of the individual components, the Neuro Center, NeuroNodes, Edge Servers, and Smart Clients, operate independently followinginitialization and start-up (blocks 241-244, respectively). With theexception of the Neuro Center, the various components can initiate andterminate their respective processing asynchronously withoutsignificantly affecting the continued operation of the remainingcomponents. Following initialization and start-up, the method completes.

FIG. 13 is a flow diagram showing a routine for performing theoperations of the Neuro Center 250 for use in the method of FIG. 12. Thepurpose of this routine is to initially, and as necessary, stagecomplete segment sets to Neuro Nodes for mirroring and validateindividual user requests.

Thus, complete sets of segments 115 (shown in FIG. 5) are sent to NeuroNodes (block 251). Thereafter, user requests are processed in aniterative processing loop (block 252-263) as follows. During eachiteration (block 252), a user request is received (block 253) from aSmart Client and the corresponding user profile 116 is looked up (block254). The play ticket 180 (shown in FIG. 9) is looked up in the ticketdatabase 118 (block 255) and, if valid (block 256), a validationcertificate 200 (shown in FIG. 10) is generated (block 258). If moreplays are left on the play ticket 180 (block 259), a replacement playticket 180 is generated (block 260). The validation certificate 200 anda replacement play ticket 180 are sent to the user (block 261) and thee-commerce data 117 is updated (block 262).

If the play ticket 180 is not valid (block 256), an invalid play ticketmessage is sent to the user (block 257) and the e-commerce data isupdated (block 262). Processing continues with each subsequent userrequest (block 263), after which the routine returns.

FIG. 14 is a flow diagram showing a routine for performing theoperations of a Neuro Node 270 for use in the method of FIG. 12. Thepurpose of this routine is to mirror individual encrypted segments tothe Neuro Nodes and to deliver requested segments to Smart Clients.

Thus, initially and as required thereafter, individual encryptedsegments 128 (shown in FIG. 6) are mirrored to Neuro Nodes and, in afurther embodiment, to Smart Clients, for providing load balancing andoptimal retrieval of media content over the network (block 271). Userrequests are then processed in an iterative processing loop (blocks272-276) as follows. During each iteration (block 272), a user requestis received (block 273) from a Smart Client. The requested segment 128is retrieved (block 274) from the segment storage and sent to therequesting user (block 275). Iterative processing continues (block 276)until the Neuro Node terminates, after which the routine returns.

FIG. 15 is a flow diagram showing a routine for performing theoperations of an Edge Server 280 for use in the method of FIG. 12. Thepurpose of this routine is to receive individual encrypted mirroredsegments and to deliver requested segments to Smart Clients.

Thus, initially and as required thereafter, individual encryptedsegments are received from Neuro Nodes and staged (block 281) asmirrored segments 148 (shown in FIG. 7). User requests are thenprocessed in an iterative processing loop (blocks 282-286) as follows.During each iteration (block 282), a user request is received (block283) from a Smart Client. The requested segment 128 is retrieved (block284) from the segment storage and sent to the requesting user (block285). Iterative processing continues (block 286) until the Edge Serverterminates, after which the routine returns.

FIG. 16 is a flow diagram showing a routine for performing theoperations of a Smart Client 290 for use in the method of FIG. 12. Thepurpose of this routine is to request delivery of and playback mediacontent selected by a user. In a further embodiment, the Smart Clientprovides peer-to-peer intercommunications by serving individualencrypted mirrored segments to other Smart Clients.

Thus, in a further embodiment, individual encrypted mirrored segments170 (shown in FIG. 8) are staged (block 291) for retrieval by peer SmartClients. Thereafter, media content requests are processed in aniterative processing loop (blocks 292-306) as follows. During eachiteration (block 292), media content is ordered (block 293) through theuser interface 162. A play ticket 180 (shown in FIG. 9) is received fromthe Neuro Center (block 294) and validated by the Smart Client (block295) by authenticating the certificate signature 189. If the play ticket180 is not valid (block 296), the media content is re-ordered (block297) from the Neuro Center.

The status of the network is determined prior to requesting eachindividual segment (blocks 298-300) as follows. First, a “pulse” is sentfrom the Smart Client (block 298) to the Neuro Nodes, Edge Servers and,in a further embodiment, peer Smart Clients. A pulse report is receivedback from each of the components (block 299) and an optimal route isdetermined (block 300) for each of the individual encrypted segments.

Each individual encrypted segment is requested (block 301) and received(block 302), preferably from an optimally sited network component. Ifsegments sufficient for playback have been received (block 303),playback begins (block 304). Receipt of segments continues (block 305)until media content delivery is complete. Processing media contentrequests continues (block 306) until the Smart Client terminates.

In a further embodiment, the Smart Client sends individual encryptedmirrored segments 170 to peer Smart Clients upon request (blocks307-109) as follows. A user request for an individual encrypted segmentis received (block 307). The requested mirrored segment 170 is retrieved(block 308) and sent to the requesting user (block 309). The delivery ofmirrored segments 170 from a peer Smart Client enables fuller networkresource utilization and improved load balancing characteristics for thenetwork.

While the invention has been particularly shown and described asreferenced to the embodiments thereof, those skilled in the art willunderstand that the foregoing and other changes in form and detail maybe made therein without departing from the spirit and scope of theinvention.

What is claimed is:
 1. A method for providing load balanced secure mediacontent delivery in a distributed computing environment, comprising:segmenting and encrypting media content into a set of individualencrypted segments each having a same fixed size on a centralizedcontrol center; staging the complete set of individual encryptedsegments to a plurality of intermediate control nodes; mirroringindividual encrypted segments from the staged complete set to aplurality of intermediate servers; receiving requests from clients forthe media content at the centralized control center; receiving eachindividual encrypted segment in the set from one of an intermediatecontrol node and an intermediate server optimally sited from therequesting client; and reassembling the individual encrypted segmentsinto the media content for media playback.
 2. The method according toclaim 1, further comprising: queuing requests from a plurality ofclients on at least one of one such single intermediate control node andone such intermediate server; and multicasting the individual encryptedsegments to the clients.
 3. The method according to claim 1, furthercomprising: encrypting each individual encrypted segment to a uniqueencryption key.
 4. The method according to claim 1, further comprising:determining the fixed size for each individual encrypted segment basedon a running time of the media content.
 5. The method according to claim1, further comprising: executing a codec at each requesting client todecode each individual encrypted segment.
 6. The method according toclaim 1, further comprising: balancing media content delivery betweeneach intermediate control node and intermediate server via thecentralized control center.
 7. The method according to claim 1, furthercomprising: enabling media playback at each requesting client prior toreceipt of substantially all individual encrypted segments.
 8. Themethod according to claim 1, further comprising: providing flexiblemedia playback at each requesting client comprising functions selectedfrom the group comprising pause, rewind, fast-forward, skip forward,skip backward, chapter stops, and a shuttle bar.
 9. The method accordingto claim 1, further comprising: broadcasting a pulse from eachrequesting client prior to receiving each individual encrypted segment;and selecting the optimally-sited one of intermediate control node andan intermediate server based on responses to the pulse.
 10. The methodaccording to claim 1, further comprising: mirroring individual encryptedsegments from the staged complete set to a plurality of peer clients;and receiving each individual encrypted segment in the set from one ofan intermediate control node, an intermediate server and a peer clientoptimally sited from the requesting client.
 11. The method according toclaim 1, further comprising: staging individual encrypted segmentscomprising an initial portion of the media content to a plurality ofclients; and sending individual encrypted segments comprising aremaining portion of the media content to the plurality of clients uponrequest.
 12. A non-transitory computer-readable storage medium havingembodied thereon a program, the program executable by a processing unitto perform a method for providing load balanced secure media contentdelivery in a distributed computing environment, the method comprising:segmenting and encrypting media content into a set of individualencrypted segments, each having a same fixed size on a centralizedcontrol center; staging the complete set of individual encryptedsegments to a plurality of intermediate control nodes; mirroringindividual encrypted segments from the staged complete set to aplurality of intermediate servers; receiving requests from one or moreclients for the media content at the centralized control center;receiving each individual encrypted segment in the set from one of anintermediate control node and an intermediate server optimally sitedfrom the requesting client; and reassembling the individual encryptedsegments into the media content for media playback.
 13. Thenon-transitory computer-readable storage medium according to claim 12,further comprising: queuing requests from a plurality of clients on atleast one of one such single intermediate control node and one suchintermediate server; and multicasting the individual encrypted segmentsto the clients.
 14. The non-transitory computer-readable storage mediumaccording to claim 12, further comprising: encrypting each individualencrypted segment to a unique encryption key.
 15. The non-transitorycomputer-readable storage medium according to claim 12, furthercomprising: determining the fixed size for each individual encryptedsegment based on a running time of the media content.
 16. Thenon-transitory computer-readable storage medium according to claim 12,further comprising: executing a codec at each requesting client todecode each individual encrypted segment.
 17. A system for providingload balanced, secure media content delivery in a distributed computingenvironment, the system comprising: a centralized control center thatsegments and encrypts media content into a set of individual encryptedsegments, a plurality of the segments being a portion of or the entiretyof the media content size, the centralized control center including anencryption module stored in memory and executable by a processor toencrypt each individual segment to a unique encryption key; a pluralityof intermediate control nodes that stage the set of individual encryptedsegments; a plurality of intermediate servers that mirror individualencrypted segments from the staged set; and at least one client that:sends requests for the media content to the centralized control center,receives individual encrypted segments in the set from one of anintermediate control node and an intermediate server optimally sitedfrom the requesting client, and reassembles the individual encryptedsegments into the media content for media playback, and includes: abroadcasting module stored in memory and executable by a processor tobroadcast a pulse prior to receiving individually encrypted segments,and a request processing module stored in memory and executable by aprocess to select the optimally sited one of intermediate control nodeand intermediate server based on responses to the pulse for subsequentreceipt of individual encrypted segments in the set.
 18. The systemaccording to claim 17, further comprising: the plurality of intermediatecontrol nodes and the plurality of intermediate servers queuing requestsfrom a plurality of clients; and the centralized control centermulticasting the individual encrypted segments to the at least oneclient.
 19. The system according to claim 17, further comprising: theencryption module encrypting each individual encrypted segment to aunique encryption key.
 20. The system according to claim 17, furthercomprising: the centralized control center determining the fixed sizefor each individual encrypted segment based on a running time of themedia content.